chushpan
Professional
- Messages
- 1,018
- Reaction score
- 878
- Points
- 113
Since its emergence in January 2023, the threat actors behind the Medusa ransomware have already claimed nearly 400 victims, with financially motivated attacks increasing by 42% from 2023 to 2024.
“Like most ransomware operators, Spearwing and its affiliates conduct dual ransomware attacks, stealing victims’ data before encrypting networks to increase the pressure on victims to pay the ransom”, Symantec noted.🗞 “If victims refuse to pay, the group threatens to publish the stolen data on its data leak site”.
While other ransomware-as-a-service (RaaS) players such as RansomHub (aka Greenbottle and Cyclops), Play (aka Balloonfly), and Qilin (aka Agenda, Stinkbug, and Water Galura) have benefited from the destruction of LockBit and BlackCat, the surge in Medusa infections suggests that this menacing player has also rushed to fill the gap left by the two prolific ransomware.
